Microsoft Q&A

Azure Active Directory

12,642 questions

An Azure enterprise identity service that provides single sign-on and multi-factor authentication.

Browse all Azure Active Directory tags

1,443 questions with Azure Active Directory-related tags

Sort by: Updated
Updated Created Answers
0 answers

How to get guest users list from Azure AD

Hi I have multiple domains in my tenant. I want to get a list of guest users. Please see below example of account, what kind of guest users I want to get. rambo.jan_test.com#EXT#@abc.onmicrosoft.comm (This is UPN) I have number of accounts like this in…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
145 questions
asked 2023-02-02T00:27:22.49+00:00
Anonymous
edited the question 2023-02-02T00:33:37.9+00:00
Anonymous
0 answers

How to get Microsoft Teams guest users

Hi I want to get a list of guest users who have access on microsoft teams. Please look snapshot. How to get these guest users by powershell. thanks

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
Azure Active Directory External Identities
Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
5,318 questions
asked 2023-02-02T00:32:26.7833333+00:00
Anonymous
0 answers

How to fix redirect issue using msal in angular if using hash routing strategy ?

I am using Microsoft Azure AD to authenticate the user and redirect back to my angular application with response. Here in redirect url i am giving [http://localhost:4200/demo/#/abc] here abc is component where i want user to redirect after successful…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-28T13:25:50.9866667+00:00
Vishva Cipherhex 0 Reputation points
commented 2023-02-01T23:54:02.78+00:00
Marilee Turscak-MSFT 20,516 Reputation points Microsoft Employee
0 answers

Enabling Azure AD Authentication for VM RDP for External Users

I need the following requirement for Virtual Machin RDP login Must be able to use Azure AD to authenticate to Azure VM Must be able for internal users with same domain to authenticate Must be able to invite external users with different domains…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
4,581 questions
asked 2023-01-27T07:41:03.58+00:00
Dileepa 1 Reputation point Microsoft MVP
commented 2023-02-01T23:45:53.18+00:00
Marilee Turscak-MSFT 20,516 Reputation points Microsoft Employee
0 answers

Azure AD is not logging out Identity provider of SAML configured Enterprise application.

I have configured an Identity Provider and SAML based Single Sign on with an Enterprise application. I have also configured a Sign out URL there. When azure AD gets logged out, it is not triggering logout call to the identity provider. Is there a way to…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-24T08:05:41.2266667+00:00
Nilotpal Mahadani 0 Reputation points
commented 2023-02-01T23:23:19.0766667+00:00
Marilee Turscak-MSFT 20,516 Reputation points Microsoft Employee
0 answers

Cant set Supported account types to Personal Microsoft account users

I can't set the Supported account types to Personal Microsoft account in the Authentication menu. There is a warning beneath: Due to temporary differences in supported functionality, we don't recommend enabling personal Microsoft accounts for an…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T18:38:19.4133333+00:00
Josh Sp 0 Reputation points
edited the question 2023-02-01T23:13:57.0133333+00:00
kobulloc-MSFT 13,006 Reputation points Microsoft Employee
0 answers

Get VM powerstate through resource graph api

Hi, i'm trying to get the powerstate of a vm through the resource graph api inside of a logic apps workflow, but i dont know how can i authorize the http request. I understand that i can authenticate the request through a managed identity but i want to…

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
1,814 questions
Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
1,082 questions
Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
1,825 questions
asked 2023-02-01T22:39:54.2366667+00:00
Benjamin Patricio Lopez Cortes 0 Reputation points
0 answers

Change the default creation GUEST prefix "#EXT#"

Hello. When creating a user in Azure B2B - the user is created with the following format. User_gmail.com#EXT#@domain.onmicrosoft.com This is causing issues with our IDP. Can this be edited so when the user is created in Azure AD the #EXT# is changed as…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T21:59:10.2166667+00:00
Daniel Maier 1 Reputation point
0 answers

AAD B2C - Add reCaptcha to SignIn page with custom policies

I try to add a reCaptcha on my signin page using custom policies. How can I add a reCaptcha field to my custom signin page that is based on the "unified.html" template? I need it to be able to validate the code inside the policy…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-31T19:49:08.12+00:00
Patrice Côté 141 Reputation points
edited the question 2023-02-01T20:36:18.0766667+00:00
Patrice Côté 141 Reputation points
0 answers

How to fix Azure Token Refresh Issues

Hello, We are seeing issues when users are signing remotely and then getting a prompt for Multifactor Authentication (from Duo Mobile) there is a timeout waiting from the token to refresh from Azure. Regards, Kevin Miller

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T19:17:02.54+00:00
Kevin Miller 0 Reputation points
commented 2023-02-01T19:22:35.6366667+00:00
Andy David - MVP 109.6K Reputation points Microsoft MVP
0 answers

can remtoe Team deploy GPOs on machines without VPN on Azure AD

We are a remote team and looking to acheive GPO on machines without a VPN using Azuer AD. Is it possible via deploing a managed server in Azure and control all machines via that server without a VPN? We do not have any on prem infra. we are fully…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T17:58:36.6866667+00:00
Shauna Wekherlien 0 Reputation points
0 answers

Azure AD B2C error when tab is closed without logging out and attempting to re log in in same browser session

Hi all, We have an application that is using Azure AD B2C custom policies for sign up and sign in flows. Users are experiencing an error which appears when a logged in tab is closed without logging out and then attempting to log in in a new tab in the…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T11:15:52.1566667+00:00
Ciaran Mallory 21 Reputation points
edited the question 2023-02-01T11:18:21.59+00:00
Ciaran Mallory 21 Reputation points
0 answers

Azure B2C Issue on SAML assertion to the application

Hi, We found an issue when integrating Azure B2C as IDP. After producing SamlResponse, we got an exception, here is the audit log: Date: 2/1/2023, 1:59 PM Activity Type: Issue a SAML assertion to the application Correlation ID:…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T06:16:05.6933333+00:00
I Gusti Agung Putra Artana 0 Reputation points
0 answers

Azure AD B2C sign-in specific for customer

Hello, We would like to use Azure AD B2C for our WPF application to allow users to sign in either with their social (Google, Facebook) or enterprise accounts. We will mainly be targeting organizations, so we would also like to integrate with a company's…

Azure Active Directory External Identities
Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-23T11:14:08.0066667+00:00
Meghana Viswanath 0 Reputation points
commented 2023-02-01T05:23:25.5233333+00:00
Givary-MSFT 11,591 Reputation points Microsoft Employee
0 answers

How it works when two or more than one tenant is registered.

The URL below is a Microsoft document about the "Restrict access to a tenant" function, and if you look at the "How it works" part of the document, there is an explanation of how the "Restrict access to a tenant" function…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T00:50:03.8833333+00:00
김경민 0 Reputation points
edited the question 2023-02-01T04:32:18.3566667+00:00
Tarun Krishna Mikkilineni-MSFT 0 Reputation points Microsoft Employee
0 answers

Powershell logged in user email

I'm using Connect-AzureAD to login to Azure AD. I would like to get the email address of the user that's logged in so that I can use that for logging it into a log file but can't seem to find a way to get the logged in users email using powershell. Any…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-31T23:28:36.4+00:00
OzDownUnder 136 Reputation points
edited the question 2023-02-01T04:20:30.0733333+00:00
Tarun Krishna Mikkilineni-MSFT 0 Reputation points Microsoft Employee
0 answers

Refresh token and outlook addins

We have an outlook addin and use msgraph to perform interactions for the user. We use azure to auth with graph. outlook addins are a SPA and live in an iframe and must use a popup window for things like auth. this means that our users must click a…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
Office Development
Office Development
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Development: The process of researching, productizing, and refining new or existing technologies.
1,964 questions
Microsoft Graph SDK
Microsoft Graph SDK
A Microsoft software developer kit designed to simplify building high-quality, efficient, and resilient applications that access Microsoft Graph.
732 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
576 questions
asked 2023-01-31T23:57:51.69+00:00
bishop filevine 1 Reputation point
edited the question 2023-02-01T04:10:57.0266667+00:00
VenkateshDodda-MSFT 6,256 Reputation points Microsoft Employee
0 answers

Azure B2C OIDC client handling custom IdP errors

Hi, If an upstream Identity Provider supports custom error messages/types, can the B2C OIDC client be configured to handle them? When ODIC provider returns the bespoke "authentication _cancelled" error B2C currently returns: AADB2C90273An…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-02-01T03:35:11.1466667+00:00
Michael O'Keeffe 0 Reputation points
0 answers

Signupandsignin user flow and password reset user flow in json, Requires exact technicalprofileid which is used in json for invoked and create userflow through powershell.

As the below json file for signin userflow I need this for signupandsignin user flow and password reset user flow in json. technical profile id require for other userflows which I didn't get from anywhere. Can you please provide exact technicalprofileid…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-31T11:29:49.5933333+00:00
Aditya Kumar 0 Reputation points
edited the question 2023-02-01T01:32:43.4933333+00:00
Carl Zhao_MSFT 18,136 Reputation points Microsoft Employee
0 answers

ldap run not working

"Cannot start validations because the user does not have permission to read the network resources. Please provide the user with the Reader role to Azure AD Domain Services and the network resources. " I'm getting a warning. I couldn't find…

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,642 questions
asked 2023-01-30T12:53:29.89+00:00
Hamza Durak 0 Reputation points
commented 2023-02-01T01:15:36.6433333+00:00
Hamza Durak 0 Reputation points